Fortinet Senior Network Engineer

Job Summary

The Senior Network Design & Implementation Engineer architects, designs, deploys and tests enterprise network, edge security and SD-WAN solutions centered around the Fortinet Security Fabric. This role requires advanced knowledge in FortiGate Secure SD-WAN, next-generation firewalling, zero-trust architecture, and cloud connectivity.

Responsibilities

• Architect scalable FortiGate Secure SD-WAN topologies across multi-region environments, including Hub-and-Spoke, Full Mesh, and Dynamic Mesh VPN structures with automated BGP routing
• Design SD-WAN rules, Performance SLAs, link health monitoring probes, and application control steering policies using Dynamic Application Steering
• Build comprehensive edge and core security layouts incorporating FortiGate NGFWs, FortiManager, FortiAnalyzer, FortiSwitch, and FortiAP
• Design and integrate Zero Trust Network Access, FortiSASE, SSL/TLS deep inspection, IPS, Web/URL filtering, and inline malware prevention profiles
• Configure, stage, and deploy physical and virtual FortiGate appliances utilizing FortiManager for centralized policy management
• Author detailed Method of Procedure documents, cutover playbooks, and rollback strategies for migrating legacy firewalls to Fortinet Secure SD-WAN
• Build standardized CLI scripts, FortiManager Meta-Fields, and Jinja2 templates to enable zero-touch provisioning for global site rollouts
• Execute post-implementation testing including failover validation, link simulations, throughput benchmarking, and author Standard Operating Procedures for operations teams

Must haves

• 6+ years of hands-on architectural and implementation experience with Fortinet solutions, including FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, and FortiClient
• Deep expertise in Fortinet Secure SD-WAN, ADVPN, SD-WAN rules, Performance SLAs, BGP over IPsec overlays, and centralized orchestration via FortiManager
• Expert-level understanding of BGP, OSPF, VRFs, VXLAN, EVPN, IPsec, NAT, IPv6, and QoS models
• 8+ years of experience in enterprise network engineering with focus on enterprise security design and multi-site WAN transformations to SD-WAN
• Bachelor’s degree in Computer Science, Network Engineering, Information Technology, or equivalent industry experience
• Practical proficiency in scripting and automation using Python, Ansible, Terraform, or REST APIs

Nice to haves

• Familiarity with Arista Velocloud solutions for integration and migration purposes
• Fortinet Certified Solution Specialist (FCSS) in Network Security or Secure SD-WAN; Fortinet Certified Expert (FCX) / NSE 8
• CCIE (Enterprise Infrastructure or Security), CCNP Enterprise/Security, or equivalent expert-level network engineering credentials

We refresh listings regularly, but some roles close early on the source platform.